Harden asset checkout validation by requiring ints

snipe · Nov 26, 2024 · fcbd5dc · fcbd5dc
1 parent 30b481b
commit fcbd5dc
Showing 1 changed file with 3 additions and 3 deletions.
diff --git a/app/Http/Requests/AssetCheckoutRequest.php b/app/Http/Requests/AssetCheckoutRequest.php
@@ -22,9 +22,9 @@ public function authorize()
     public function rules()
     {
         $rules = [
-            'assigned_user'         => 'required_without_all:assigned_asset,assigned_location',
-            'assigned_asset'        => 'required_without_all:assigned_user,assigned_location',
-            'assigned_location'     => 'required_without_all:assigned_user,assigned_asset',
+            'assigned_user'         => 'integer|required_without_all:assigned_asset,assigned_location',
+            'assigned_asset'        => 'integer|required_without_all:assigned_user,assigned_location',
+            'assigned_location'     => 'integer|required_without_all:assigned_user,assigned_asset',
             'status_id'             => 'exists:status_labels,id,deployable,1',
             'checkout_to_type'      => 'required|in:asset,location,user',
             'checkout_at' => [